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CROSS-REFERENCES TO RELATED APPLICATIONS 

This Application for Patent claims priority from, and hereby incorporates by reference for 
any purpose the entire disclosure of, co-pending Provisional Patent Application No. 
60/470,435 filed on May 15, 2003, and co-pending Provisional Patent Application No. 
5 60/41 1,042 filed on September 17, 2002. 

BACKGROUND 
Technical Field 

The present invention relates to a method of and system for monitoring the security of a 
container and tracking its location and, more particularly, but not by way of limitation, to 
10 a method of and system for monitoring the security of and tracking intermodal freight 
containers throughout a supply chain to discourage or prevent such urgent problems as 
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terrorism, and also illegal immigration, theft or adulteration of goods, and other 
irregularities. 

History of the Related Art 

The vast majority of goods shipped throughout the worid are shipped via what are 
5 referred to as intermodal freight containers. As used herein, the term "containers" 
includes any container (whether with wheels attached or not) that is not transparent to 
radio frequency signals, including, but not limited to, intermodal freight containers. The 
most conMnon intermodal freight containers are known as International Standards 
Organization (ISO) dry intermodal containers, meaning they meet certain specific 

10 dimensional, mechanical and other standards issued by the ISO to facilitate global trade 
by encouraging development and use of compatible standardized containers, handling 
equipment, ocean-going vessels, raikoad equipment and over-the-road equipment 
throughout the worid for all modes of surface transportation of goods. There are 
currently more than 12 million such containers in active circulation around the world as 

15 well as many more specialized containers such as refrigerated containers that carry 
perishable commodities. The United States alone receives approximately six million 
loaded containers per year, or approximately 17,000 per day, representing nearly half of 
the total value of all goods received each year. 

Since approximately 90% of all goods shipped internationally are moved in containers, 
20 container transport has become the backbone of the worid economy. 
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The sheer volume of containers transported worldwide renders individual physical 
inspection impracticable, and only approximately 2% to 3% of containers entering the 
United States are actually physically inspected. Risk of introduction of a terrorist 
biological, radiological or explosive device via a freight container is high, and the 
5 consequences to the international economy of such an event could be catastrophic, given 
the importance of containers in world commerce. 

Even if sufficient resources were devoted in an effort to conduct physical inspections of 
all containers, such an undertaking would result in serious economic consequences. The 
time delay alone could, for example, cause the shut down of factories and undesirable and 
10 expensive delays in shipments of goods to customers. 

Current container designs fail to provide adequate mechanisms for establishing and 
monitoring the security of the containers or their contents. A typical container includes 
one or more door hasp mechanisms that allow for the insertion of a plastic or metal 
indicative "seal" or boh barrier conventional "seal" to secure the doors of the container. 
15 The door hasp mechanisms that are conventionally used are very easy to defeat, for 
example, by drilling an attachment boh of the hasp out of a door to which the hasp is 
attached. The conventional seals themselves currently in use are also quite simple to 
defeat by use of a common cutting tool and replacement with a rather easily duplicated 
seal. 
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A more advanced solution proposed in recent time is an electronic seal ("e-seal"). These 
enseals are equivalent to traditional door seals and are applied to the containers via the 
same, albeit weak, door hasp mechanism as an accessory to the container, but include an 
electronic device such as a radio or radio reflective device that can transmit the e-seal's 
5 serial number and a signal if the e-seal is cut or broken after it is installed. However, the 
e-seal is not able to conwnunicate with the interior or contents of the container and does 
not transmit information related to the interior or contents of the container to another 
device. 

The e-seals typically employ either low power radio transceivers or use radio frequency 
10 backscatter techniques to convey information from an e-seal tag to a reader installed at, 
for example, a terminal gate. Radio frequency backscatter involves use of a relatively 
expensive, narrow band high-power radio technology based on combined radar and radio- 
broadcast technology. Radio backscatter technologies require that a reader send a radio 
signal with relatively high transmitter power (i.e., 0.5-3W) that is reflected or scattered 
15 back to the reader with modulated or encoded data from the e-seal. 

In addition, e-seal applications currently use completely open, unencrypted and insecure 
air interfaces and protocols allowing for relatively easy hacking and counterfeiting of e- 
seals. Current e-seals also operate only on locally authorized frequency bands below 1 
GHz, rendering them impractical to implement in global commerce involving intermodal 
20 containers since national radio regulations around the world currently do not allow their 
use in many countries. 

4 

DALLAS2 997976V4 62929-00002 



CUSTOMER NO. 23932 



PATENT APPLICATION 
62929-00002USPX 



Furthermore, the e-seals are not effective at monitoring security of the containers from 
the standpoint of ahemative forms of intrusion or concern about the contents of a 
container, since a container may be breached or pose a hazard in a variety of ways since 
the only conventional means of accessing the inside of the container is through the doors 
5 of the container. For example, a biological agent could be implanted in the container 
through the container's standard air vents, or the side walls of the container could be cut 
through to provide access. Although conventional seals and the e-seals afford one form 
of security monitoring the door of the container, both are susceptible to damage. The 
conventional seal and e-seals typically merely hang on the door hasp of the container, 

10 where they are exposed to physical damage during container handling such as ship 
loading and unloading. Moreover, conventional seals and e-seals cannot monitor the 
contents of the container and are not able to interface with or (since containers are 
manufactured from steel that is opaque to radio signals) transmit data to the outside world 
from other sensors which may be placed in the interior of the container such as, for 

15 example, temperature, light, combustible gas, motion, or radioactivity sensors (without 
modifying the container door or wall). 

In addition to the above, the monitoring of the integrity of containers via door movement 
can be relatively complex. Although the containers are constructed to be structurally 
sound and carry heavy loads, both within the individual containers as well as by virtue of 
20 containers stacked upon one another, each container is also designed to accommodate 
transverse loading to accommodate dynamic stresses and movement inherent in 
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(especially) ocean transportation and which are typically encountered during shipment of 
the container. Current ISO standards for a typical container may allow movement on a 
vertical axis due to transversal loads by as much as 40 millimeters relative to one another. 
Therefore, security approaches based upon maintaining a tight interrelationship between 
5 the physical interface between two container doors are generally not practicable. 

It would therefore be advantageous to provide a method of and system for: (i) monitoring 
the movement of the doors of a container relative to the container structure in a cost 
effective, always available, yet reliable fashion; (ii) providing for a data path for other 
security sensors placed in a container to detect alternative means of intrusion or presence 
10 of dangerous or illicit cargo to receivers in the outside world; and (iii) simultaneously 
provide a means for tracking transport movements of containers for reasons of security 
and logistics efficiency. 

SUMMARY OF THE USTVENTION 

These and other drawbacks are overcome by embodiments of the present invention, 
15 which provides a method of and system for efficiently and reliably monitoring a 
container and its contents as well as tracking containers to maintain the security thereof 
More particularly, one aspect of the invention includes a device for monitoring the 
condition of a container. The device includes a means for sensing at least one condition 
of the container, a means for transmitting information relative to the at least one sensed 
20 condition to a location outside the container, and a means for interpreting the at least one 
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sensed condition. The means for interpreting is adapted to be disposed inside the 
container. The sensed condition may be a sensed pressure and the the means for sensing 
may be a pressure sensor. Alternatively, the sensed condition may be a sensed light or a 
sensed motion and the means for sensing may be a light sensor or a motion sensor 
5 respectively. 

In another aspect, the present invention relates to a method of electronically securing a 
container. The method includes the steps of selectmg a container to seal, disposing an 
electronic securing device within the container, transmitting a request to a server, and 
generating by the server of a mathematically-unique security key in response to receipt of 
10 the request. The method also includes the steps of encrypting, by the server, of the 
security key, transmitting the unique and encrypted security key to the device disposed 
within the container, use by the device of the encrypted security key to calculate a unique 
result, and storing, by the device, of the unique result. 

In another aspect, the present invention relates to a device for determining whether a 
15 security breach of a container has occurred. The device includes means for detecting 
pressure exerted by a door of the container and means for establishing a basehne pressure 
value. The baseline pressure value is related to a calculated mean value from at least two 
pressure detections. The device also includes a means for defining a pressure threshold 
and a means for determining from the pressure threshold and the detected pressure 
20 whether a security breach has occurred. 
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In another aspect, the present invention relates to a method of detecting a security breach 
of a container. The method includes the steps of placing a pressure sensor adjacent a 
structural member and a door of the container, monitoring the pressure sensor via a data 
unit located within the container, determining, by the data unit, whether a security breach 
5 of the door has occurred based on a change in pressure sensed by the pressure sensor, 
communicating, by the data unit, of a result of the determining step to an antenna 
interoperably connected to the data unit and located adjacent to and outside of the 
container, and transmitting, by the antenna, of information relative to the communicating 
step. 

10 In another aspect, the present invention relates to a method of checking a security status 
of a previously electronically secured container of the type wherein a security device is 
disposed therein. The method includes the steps of transmitting, by a reader, of a device 
challenge to a device associated with the container, generating, by the device, of a device 
response to the device challenge, and transmitting, by the device, of the device response 

15 to the reader. The method also includes the steps of transmitting, by the reader, of a 
server challenge to a server, generating, by the server, of a server response to the server 
challenge, and transmitting, by the server, of the server response to the reader. The 
method also includes the steps of comparing the server response and the device response. 
If the server response and the device response are equal, a security breach is deemed to 

20 not have occurred since the container was electronically sealed. 
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In another aspect, the present invention relates to a device for determining whether a 
security breach of a container has occurred. The device includes a means for sensing at 
least one condition of the container, means for estabUshing a baseline value for the 
sensed condition, means for defining a sensed condition value threshold, and means for 
5 determining fi'om the sensed condition value threshold and the sensed condition whether 
a security breach has occurred. 

In another aspect, the present invention relates to a device for determining a security 
condition of a container and its contents. The device includes a means for detecting a 
condition of the container and its contents and a means for establishing a baseline 
10 condition value. The baseline condition value is related to normal fluctuations in the 
condition of the container and its contents experienced during transport. The device also 
includes a means for defining a condition threshold and a means for determining fi-om the 
condition threshold and the detected condition, the security condition of the container. 

In another aspect, the present invention relates to a method of detecting a security 
15 condition in a container and its contents. The method includes the steps of placing a 
sensor within the container, monitoring the sensor via a data unit located within the 
container, and determining by the data unit whether a security condition has occurred 
based on sensed changes in value sensed by the sensor. The method also includes the 
steps of communicating by the data unit, of a resuk of the determining step to an antenna 
20 interoperably connected to the data unit and located relative to the container in a position 
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for transmitting data to a location outside the container, and transmitting by the antenna 
of information relative to the communication step. 

BRIEF DESCRIPTION OF DRAWINGS 

A more complete understanding of exemplary embodiments of the present invention can 
5 be achieved by reference to the following Detailed Description of Exemplary 
Embodiments of the Invention when taken in conjunction with the accompanying 
Drawings, wherein: 

FIG. lA is a diagram illustrating communication among components of a system 
according to an embodiment of the present invention; 

10 FIG. IB is a diagram illustrating an exemplary supply chain; 

FIG. 2A is a schematic diagram of a device according to an embodiment of the present 
invention; 

FIG. 2B is a top view of a device according to an embodiment of the present 
invention; 

15 FIG. 2C is a side view of a device according to an embodiment of the present 
invention; 

FIG. 2D is a first perspective cut-away view of a device according to an embodiment 
of the present invention; 
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FIG. 2E is a second perspective cut-away view of a device according to an 
embodiment of the present invention; 

FIG. 2F is a front view of a device according to an embodiment of the present 
invention; 

5 FIG. 2G is a back view of a device according to an embodiment of the present 
invention; 

FIG. 2H is a bottom view of a device according to an embodiment of the present 
invention; 

FIG. 21 is a top view of a device according to an embodiment of the present 
10 invention; 

FIG. 2J is a front view of the device of FIG. 2F as installed on a container; 

FIG. 2K is a perspective view of the device of FIG. 2F as installed on a container; 

FIG. 3 A is a schematic diagram of a reader according to an embodiment of the present 
invention; 

15 FIG. 3B is a diagram of a reader in accordance with the principles of the present 
invention; 
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FIG. 4 is a first application scenario of the system of FIG. lA according to an 
embodiment of the present invention; 

FIG. 5 is a second application scenario of the system of FIG. 1 A according to an 
embodiment of the present invention; 

5 FIG. 6 is a third application scenario of the system of FIG. lA according to an 
embodiment of the present invention; 

FIG. 7 is a fourth application scenario of the system of FIG. 1 A according to an 
embodiment of the present invention; 

FIG. 8 is a diagram illustrating a container-securing process in accordance with an 
10 embodiment of the present invention; 

FIG. 9 is a diagram illustrating a container-security-check process in accordance 
with an embodiment of the present invention; and 

FIG. 10 is a flow diagram illustrating a door-sensor calibration process in accordance 
with an embodiment of the present invention. 



15 DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS OF THE PRESENT 
INVENTION 



It has been found that a container security device of the type set forth, shown, and 
described below, may be positioned in and secured to a container for effective monitoring 
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of the integrity and condition thereof and its contents. As will be defined in more detail 
below, a device in accordance with principles of the present invention is constructed for 
positioning Avithin a pre-defined structural portion of the container which generally 
manifests minimal structural movement due to routine loading and handling and 
5 extending through a conventional interface between the container fi"ame and door region 
therealong. An elastomeric gasket is conventionally placed around the door and extends 
through the interface region to ensure the container is watertight and the goods thus 
protected fi-om weather. The device is adapted for: (a) easy tool-fi-ee installation; (b) self 
powered intermittent signal transmission; and (c) sensing of the pressure of the 
10 elastomeric door seal relative thereto for transmitting deviations thereof indicative of 
door movements of the container, including an intrusion therein. 

FIG. lA is a diagram illustrating communication among components of a system in 
accordance with principles of the present invention. The system includes a device 12, at 
least one variety of reader 16, a server 15, and a software backbone 17. The device 12 

15 ensures that the container has not been breached after the container 10 has been secured. 
The container 10 is secured and tracked by a reader 16. Each reader 16 may include 
hardware or software for communicating with the server 15 such as a modem for 
transmitting data over GSM, CDMA, etc. or a cable for downloading data to a PC that 
transmits the data over the Internet to the server 15. Various conventional means for 

20 transmitting the data fi-om the reader 16 to the server 15 may be implemented within the 
reader 16 or as a separate device. The reader 16 may be configured as a handheld reader 

13 
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16(A), a mobile reader 16(B), or a fixed reader 16(C). The handheld reader 16(A) may 
be, for example, operated in conjunction with, for example, a mobile phone, a personal 
digital assistant, or a laptop computer. The mobile reader 16(B) is basically a fixed 
reader with a GPS interface, typically utilized in mobile installations (e.g., on trucks, 
5 trains, or ships using existing GPS, AIS or similar positioning systems) to secure, track, 
and determine the integrity of the container in a manner similar to that of the handheld 
reader 16(A). In fixed installations, such as, for example, those of a port or shipping 
yard, the fixed reader 16(C) is typically installed on a crane or gate. The reader 16 serves 
primarily as a relay station between the device 12 and the server 15. 

10 The server 15 stores a record of security transaction details such as, for example, door 
events (e.g., security breaches, container security checks, securing the container, and 
disarming the container), location, as well as any additional desired peripheral sensor 
information (e.g., temperature, motion, radioactivity). The server 15, in conjunction with 
the software backbone 17, may be accessible to authorized parties in order to determine a 

15 last known location of the container 10, make integrity inquiries for any number of 
containers, or perform other administrative activities. 

The device 12 communicates with the readers 16 via a short-range radio interface such 
as, for example, a radio interface utilizing direct-sequence spread-spectrum principles. 
The radio interface may use, for example, BLUETOOTH or any other short-range, low- 
20 power radio system that operates in the license-jfree Industrial, Scientific, and Medical 
(ISM) band, which operates around e.g. 2.4 GHz. Depending on the needs of a specific 
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solution, related radio ranges are provided, such as, for example, a radio range of up to 
100 m. 

The readers 16 may communicate via a network 13, e.g. using TCP/IP, with the server 15 
via any suitable technology such as, for example. Universal Mobile Teleconmiunications 
5 System (UMTS), Global System for Mobile Communications (GSM), Code Division 
Multiple Access (CDMA), Time Division Multiple Access (TDMA), Pacific Digital 
Cellular System(PDC), Wideband Local Area Network (WLAN), Local Area Network 
(LAN), Satellite Communications systems. Automatic Identification Systems (AIS), or 
Mobitex. The server 15 may communicate with the software backbone 17 via any 

10 suitable wired or wireless technology. The software backbone 17 is adapted to support 
real-time surveillance services such as, for example, tracking and securing of the 
container 10 via the server 15, the readers 16, and the device 12. The server 15 and/or 
the software backbone 17 are adapted to store information such as, for example, 
identification information, tracking information, door events, and other data transmitted 

15 by the device 12 and by any additional peripheral sensors interoperably connected to the 
device 12. The software backbone 17 also allows access for authorized parties to the 
stored information via a user interface that may be accessed via, for example, the 
Internet. 

Referring now to FIG. IB, there is shown a diagram illustrating a flow 2 of an exemplary 
20 supply chain from points (A) to (I). Referring first to point (A), a container 10 is filled 
with cargo by a shipper or the like. At point (B), the loaded container is shipped to a port 
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of embarkation via highway or rail transportation. At point (C), the container is gated in 
at the port of loading such as a marine shipping yard. 

At point (D), the container is loaded on a ship operated by a carrier. At point (E), the 
5 container is shipped by the carrier to a port of discharge. At point (F), the container is 
discharged from the ship. Following discharge at point (F), the container is loaded onto a 
truck and gated out of the port of discharge at pomt (G). At point (H), the container is 
shipped via land to a desired location in a similar fashion to point (B). At point (I), upon 
arrival at the desired location, the container is unloaded by a consignee. 

10 

As will be apparent to those having ordinary skill in the art, there are many times within 
the points of the flow 2 at which security of the container could be compromised without 
visual or other conventional detection. In addition, the condition of the contents of the 
container could be completely unknown to any of the parties involved in the flow 2 until 
15 point (H) when the contents of the container are unloaded. 

FIG. 2A is a block diagram of the device 12. The device 12 includes an antenna 20, an 
RF/baseband unit 21, a microprocessor (MCU) 22, a memory 24, and a door sensor 29. 
The device 12 may also include an interface 28 for attachment of additional sensors to 
monitor various internal conditions of the container such as, for example, temperature, 
20 vibration, radioactivity, gas detection, and motion. The device 12 may also include an 
optional power source 26 (e.g., battery); however, other power arrangements that are 
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detachable or remotely located may also be utilized by the device 12, When the power 
source 26 includes a battery (as shown herein), inclusion of the power source 26 in the 
device 12 may help to prolong battery life by subjecting the power source 26 to smaller 
temperature fluctuations by virtue of the power source 26 being inside the container 10. 

5 The presence of the power source 26 within the container 10 is advantageous in that the 
ability to tamper with or damage the power source 26 is decreased. The device 12 may 
also optionally include a connector for interfacing directly with the reader 16. For 
example, a connector may be located on an outer wall of the container 10 for access by 
the reader 16. The reader 16 may then connect via a cable or other direct interface to 

10 download information from the device 12. 

The microprocessor 22 (equipped with an internal memory) discerns door events from the 
door sensor 29, including, for example, container-security requests, container-disarming 
requests, and container-security checks. The discerned door events also include security 
breaches that may compromise the contents of the container 10, such as opening of a door 

15 after the container 10 has been secured. The door events may be time-stamped and stored 
in the memory 24 for transmission to the reader 16. The door events may be transmitted 
immediately, periodically, or in response to an interrogation from the reader 16. The 
door sensor 29 shown herein is of the pressure sensitive variety, although it may be, for 
example, an alternative contact sensor, a proximity sensor, or any other suitable type of 

20 sensor detecting relative movement between two surfaces. The term pressure sensor as 
used herein thus includes, but is not limited to, these other sensor varieties. 
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The antenna 20 is provided for data exchange with the reader 16. In particular, various 
information, such as, for example, status and control data, may be exchanged. The 
microprocessor 22 may be programmed with a code that uniquely identifies the container 
10. The code may be, for example, an International Standards Organization (ISO) 

5 container identification code. The microprocessor 22 may also store other logistic data, 
such as Bill-of-Lading (B/L), a mechanical seal number, a reader identification with a 
time-stamp, etc. A special log file may be generated, so that tracking history together 
with door events may be recovered. The code may also be transmitted fi-om the device 
12 to the reader 16 for identification purposes. The RF^aseband unit 21 upconverts 

10 microprocessor signals fi-om baseband to RF for transmission to the reader 16. 

The device 12 may, via the antenna 20, receive an integrity inquiry fi-om the reader 16. 
In response to the integrity query, the microprocessor 22 may then access the memory to 
extract, for example, door events, temperature readings, security breaches, or other stored 
information in order to forward the extracted information to the reader 16. The reader 16 

15 may also send a security or disarming request to the device 12. When the container 10 is 
secured by the reader 16, the MCU 22 of the device 12 may be programmed to emit an 
audible or visual alarm when the door sensor 29 detects a material change in pressure 
after the container is secured. The device 12 may also log the breach of security in the 
memory 24 for transmission to the reader 16. If the reader 16 sends a disarming request 

20 to the device 12, the microprocessor 22 may be programmed to disengage from logging 
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door events or receiving signals from the door sensor 29 or other sensors interoperably 
connected to the device 12. 

The microprocessor 22 may also be programmed to implement power-management 
techniques for the power source 26 to avoid any unnecessary power consumption. In 

5 particular, one option is that one or more time window(s) are specified via the antenna 20 
for activation of the components in the device 12 to exchange data. Outside the specified 
time windows, the device 12 may be set into a sleep mode to avoid unnecessary power 
losses. Such a sleep mode may account for a significant part of the device operation 
time, the device 12 may as a result be operated over several years without a need for 

10 battery replacement. 

In particular, according to the present invention, the device 12 utiUzes a "sleep" mode to 
achieve economic usage of the power source 26. In the sleep mode, a portion of the 
circuitry of the device 12 is switched off. For example, all circuitry may be switched off 
except for the door sensor 29 and a time measurement unit (e.g., a counter in the 
15 microprocessor 22) that measures a sleep time period tsicep. In a typical embodiment, 
when the sleep time period has expired or when the door sensor 29 senses a door event, 
the remaining circuitry of the device 12 is powered up. 

When the device 12 receives a signal fi-om the reader 16, the device 12 remains to 
communicate with the reader 16 as long as required. If the device 12 does not receive a 
20 signal fi-om the reader 16, the device 12 will only stay active as long as necessary to 
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ensure that no signal is present during a time period referred to as a radio*signal time 
period or sniff "period" ("tsmff). 

Upon tsniff being reached, the device 12 is powered down again, except for the time 
measurement unit and the door sensor 29, which operate to wake the device 12 up again 
5 after either a door event has occurred or another sleep time period has expired. 

In a typical embodiment, the reader-signal time period is much shorter (e.g., by several 
orders of magnitude less) than the sleep time period so that the lifetime of the device is 
prolonged accordingly (e.g., by several orders of magnitude) relative to an "always on" 
scenario. 

10 The sum of the sleep time period and the reader-signal time period (cycle time") imposes 
a lower limit on the time that the device 12 and the reader 16 must reach in order to 
ensure that the reader 16 becomes aware of the presence of the device 12. The related 
time period will be referred to as the passing time ("tpass ") 

However, a passing time ("tpass") is usually dictated by the particular situation. The 
15 passing time may be very long in certain situations (e.g., many hours when the device 12 
on a freight container is communicating with the reader 16 on a truck head or chassis 
carrying the container 10) or very short in other situations (e.g., fractions of a second 
when the device 12 on the container 10 is passing by the fixed reader 16(C) at high 
speed). It is typical for all the applications that each of the devices 12 will, during its 
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lifetime, sometimes be in situations with a greater passing time and sometimes be in 
situations with a lesser passing time. 

The sleep time period is therefore usually selected such that the sleep time period is 
compatible with a shortest conceivable passing time, ("tpass,min.") In other words, the 
5 relation - 

tsleep ^ tpass,min " tsnifT 

should be fulfilled according to each operative condition of the device. Sleep time 
periods are assigned to the device in a dynamic matter depending on the particular 
situation of the device (e.g., within its life cycle). 

10 Whenever the reader 16 communicates with the device 12, the reader 16 reprograms the 
sleep time period of the device 12 considering the location and function of the reader 16, 
data read from the device 12, or other information that is available in the reader 16. 

For example, if the container 10 equipped with device 12 is located on a truck by a 
toplifler, straddle carrier, or other suitable vehicle, the suitable vehicle is equipped with 
15 the reader 16, whereas the truck and trailer are not equipped with any readers 16. It is 
expected that the truck will drive at a relatively-high speed past the fixed reader 16(C) at 
an exit of a port or a container depot. Therefore, the reader 16(C) on the vehicle needs to 
program the device 12 with a short sleep time period (e.g., --0.5 seconds). 
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Further ramifications of the ideas outHned above could be that, depending on the 
situation, the reader 16 may program sequences of sleep periods into the device 12. For 
example, when the container 10 is loaded onboard a ship, it may be sufficient for the 
device 12 to wake up only once an hour while the ship is on sea. However, once the ship 
5 is expected to approach a destination port, a shorter sleep period might be required to 
ensure that the reader 16 on a crane unloading the container 10 will be able to establish 
contact with the device 12. The reader 16 on the crane loading the container 10 onboard 
the ship could program the device 12 as follows: first, wake up once an hour for three 
days, then wake up every ten seconds. 

10 In another scenario, the reader 16 is moving together with the device 12 and could 
modify the sleep time period in dependence on the geographical location. For example, it 
may be assumed that the device 12 on the container 10 and the reader 16 of a truck 
towing the container 10 may constantly communicate with each other while the container 
10 is being towed. As long as the container 10 is far enough away from its destination, 

15 the reader 16 could program the device 12 to be asleep for extended intervals (e.g., one 
hour.) When the reader 16 is equipped with a Global Positioning System (GPS) receiver 
or other positioning equipment, the reader may determine when the container 10 is 
approaching its destination. Once the container approaches the destination, the reader 16 
could program the device 12 to wake up more fi*equently( e.g., every second). 

20 While the above-described power-management method has been explained with respect 
to the device 12 in the context of trucking of freight containers or other cargo in 
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transportation by sea, road, rail or air, it should be understood for those skilled in the art 
that the above-described power-management method may as well be applied to, for 
example, trucking of animals, identification of vehicles for road toll collection, and theft 
protection, as well as stock management and supply chain management. 

5 Referring now to FIG. 2B, there is shown a first perspective view of the device 12. The 
device 12 includes a housing 25 containing the data unit 100 (not shown), a support arm 
102 extending therefi^om, and an antenna arm 104 extending outwardly thereof in an 
angular relationship therewith. As will be described below, the size of the housing 25, 
the length of the support arm 102, and the configuration of the antenna arm 104 are 

10 carefully selected for compatibility with conventional containers. The housing 25, the 
support arm 102, and the antenna arm 104 are typically molded within a polyurethane 
material 23 or the like in order to provide protection from the environment. 

Still referring to FIG. 2B, a portion of material 23 of the support arm 102 is cut away to 
illustrate placement of at least one magnet 27 therein and at least one door sensor 29 
15 thereon. The magnet 27 permits an enhanced securement of the device 12 within the 
container as described below, while the door sensor 29 detects variations in pressure 
along a sealing gasket (not shown) of the container discussed below. 

A second perspective view of the device 12 as illustrated in FIG. 2C, further illustrates 
the placement of the magnet 27 in the support arm 102. The magnet 27 is positioned 
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within corresponding apertures 27 A formed in the support arm 102 and are bonded 
thereto in a manner facilitating the installation of the device 12. 

Now referring to FIG. 2D, a top view of the device 12 is illustrated before any of the 
molding material 23 has been applied. In this way, the position of the power source 26, 

5 the data unit 100, and the antenna 20 are shown more clearly. The device 12 includes the 
data unit 100 and power source 26, the microprocessor 22 (not shown), the memory 24 
(not shown), and the optional interface 28 (not shown). The support arm 102 extends 
from the data unit 100 and includes the apertures 27A to house the at least one magnet 27 
as well as a support surface to which the door sensor 29 is attached. Extending from the 

10 support arm 102 is the antenna arm 104 for supporting the antenna 20. 

Now referring to FIG. 2E, a side view of the device 12 before any of the molding 
material 23 has been applied is illustrated. As shown, the support arm 102 extends 
upwardly and outwardly from the data unit 100. The support arm 102 is relatively thin 
and substantially horizontal, although other configurations are available. As more clearly 
IS indicated in FIG. 2E, the antenna arm 104 extends angularly from the support arm 102. 

Referring now to FIG. 2F, there is shown a front view of the device 12 after the molding 
material 23 has been applied. The device 12 is illustrated with the molded material 23 
that forms the housing 25 encapsulating the device 12. The molding material 23 extends 
from the antenna arm 104 across the support arm 102 and around the data unit 100. The 



DALLAS2 997976v4 62929-00002 



24 



CUSTOMER NO. 23932 



PATENT APPLICATION 
62929-00002USPX 



particular shape and configuration shown herein is but one embodiment of the device 12 
and no limitation as to the precise shape of the device 12 is suggested herein. 

Referring now to FIG. 2G, there shown a back view of the device 12 according to FIG, 
lA. The angular configuration of the antenna arm 104 is likewise seen in a more 
5 simplified format for purposes of illustration in FIGS. 2H and 21, which represent bottom 
and top views of the device 12. 

FIG, 2 J illustrates a fi-ont view of the device 12 as installed on the container 10. The 
container 10 is shown with a door 202 of the container 10 in an open position to show the 
orientation of the device 12 in greater detail. The device 12 is mounted to an area 

10 adjacent to the door 202 of the container 10. The device 12 may be mounted via a 
magnetic connection (as previously illustrated), an adhesive connection, or any other 
suitable connection, on a vertical beam 204 of the container 10. As can be seen in FIG. 
2J, the device 12 is mounted so that, when the door 202 is closed, the antenna arm 104 is 
located on the exterior of the container 10, the door sensor 29, located within the support 

15 arm 102, is directly adjacent to a portion of the door 202, and the data unit 100 is located 
on the interior of the container 10. The device 12 may detect, via the door sensor 29, 
deviations of pressure to determine whether a door event (e.g., relative and/or absolute 
pressure change) has occurred. The device 12 may transmit data relative to the status of 
the door 202 via the antenna 20 to the server 15 as previously described. In addition, the 

20 interface 28 may be connected to any number of the external sensors 208 in order to 
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capture information relative to internal conditions of the container 10 and the information 
obtained via the sensor 208 transmitted to the server 15. 

Remaining with FIG. 2 J, the device 12 is oriented within the container 10 so that the data 
unit 100 is disposed within a generally C-shaped recess or channel 206. The support arm 
5 102, including the door sensor 29, extends across the vertical beam 204 between it and a 
portion of the door 202. When the door 202 is closed, pressure is maintained at the door 
sensor 29, When the door 202 is opened, the pressure is relieved, thereby alerting the 
microprocessor 22 that a door event has occurred. An electronic security key stored in 
the memory 24 will be erased or changed to indicate a "broken" seal or tampering event. 

10 FIG. 2K is a perspective view of the device 12 of FIG. 2D as installed on the container 
10. The device 12 is shown attached to the vertical beam 204 so that the door sensor 29 
(not shown) within the support arm 102 is adjacent to the vertical beam 204, the antenna 
arm 104 is positioned in an area of the hinge channel of the container 10, and the data 
unit 100 is positioned inside the C-channel 206 of the container 10. As more clearly 

15 shown herein, the antenna arm 104 protrudes from the support arm 102 to an area 
substantially near the hinge portion of the container 10 in order to remain on the exterior 
of the container 10 when the door 202 is closed. 

By placing the data unit 100 on the interior of the container 10, opportunities for 
tampering and/or damage to the device 12 are reduced. Because the data unit 100 is 

26 

DALLAS2 997976v4 62929^0002 



CUSTOMER NO. 23932 



PATENT APPLICATION 
62929-00002USPX 



disposed in the C-channel 206, even though the contents of the container 10 may shift 
during transport, the contents are not likely to strike or damage the device 12. 

Although the above embodiment is shown as a single unit including at least one sensor 
and an antenna 20 for conmiunicating with the reader 16, the present invention may be 
implemented as several units. For example, a light, temperature, radioactivity, etc. sensor 
may be positioned anywhere inside the container 10. The sensor takes readings and 
transmits the readings via BLUETOOTH, or any short range communication system, to 
an antenna unit that relays the readings or other information to the reader 16. The sensors 
may be remote and separate from the antenna unit. In addition, the above embodiment 
illustrates a device 12 that includes a door sensor 29 for determining whether a security 
breach has occurred. However, an unlimited variety of sensors may be employed to 
determine a security breach in place of, or in addition to, the door sensor 29. For 
example, a light sensor may sense fluctuations in light inside the container 10. If the light 
exceeds or falls below a predetermined threshold, then it is determined a security breach 
has occurred. A temperature sensor, radioactivity sensor, combustible gas sensor, etc. 
may be utilized in a similar fashion. 

The device 12 may also trigger the physical locking of the container 10. For instance, 
when a reader 16 secures, via a security request, the contents of the container 10 for 
shipment, the microprocessor 22 may initiate locking of the container 10 by energizing 
elecromagnetic door locks or other such physical locking mechanism. Once the container 
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is secured via the security request, the container 10 is physically locked to deter theft or 
tampering. 

As shown in FIG. 3 A, the reader 16 includes a short range antenna 30, a microprocessor 
36, a memory 38, and a power supply 40. The short range antenna 30 achieves the 
5 wireless short-range, low-power communication link to the device 12 as described above 
with reference to FIG. 2 A. The reader 16 may include or separately attach to a device 
that achieves a link to a remote container-surveillance system (e.g., according to GSM, 
CDMA, PDC, or DAMPS wireless communication standard or using a wired LAN or a 
wireless local area network WLAN, Mobitex, GPRS, UMTS), Those skilled in the art 

10 will understand that any such standard is non-binding for the present invention and that 
additional available wireless communications standards may as well be applied to the 
long range wireless conmiunications of the reader 16. Examples include satellite data 
communication standards like Inmarsat, Iridium, Project 21, Odyssey, Globalstar, ECCO, 
EUipso, Tritium, Teledesic, Spaceway, Orbcom, Obsidian, ACeS, Thuraya, or Aries in 

15 cases where terrestrial mobile conmiunication systems are not available. 

The reader 16 may include or attach to a satellite positioning unit 34 is for positioning of 
a vehicle on which the container 10 is loaded. For example, the reader 16 may be the 
mobile reader 16(B) attached to a truck, ship, or railway car. The provision of the 
positioning unit 34 is optional and may be omitted in case tracking and positioning of the 
20 container 10 is not necessary. For instance, the location of the fixed reader 16(C) may be 
known; therefore, the satellite positioning information would not be needed. One 
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approach to positioning could be the use of satellite positioning systems (e.g., GPS, 
GNSS, or GLONASS). Another approach could be the positioning of the reader 16 
utilizing a mobile communication network. Here, some of the positioning techniques are 
purely mobile communication network based (e.g., EOTD) and others rely on a 
5 combination of satellite and mobile communication network based positioning techniques 
(e.g., Assisted GPS). 

The microprocessor 36 and the memory 38 in the reader 16 allow for control of data 
exchanges between the reader 16 and the device 12 as well as a remote surveillance 
system as explained above and also for a storage of such exchanged data. Necessary 
10 power for the operation of the components of the reader 16 is provided through a power 
supply 40. 

FIG. 3B is a diagram of a handheld reader 16(A) in accordance with the principles of the 
present invention. The handheld reader 16(A) is shown detached from a mobile phone 
16(A1). The handheld reader 16(A) communicates (as previously mentioned) with the 

15 device 12 via, for example, a short-range direct sequence spread spectrum radio interface. 
Once the handheld reader 16(A) and the device 12 are within close range of one another 
(e.g., < 100 m), the device 12 and the handheld reader 16(A) may communicate with one 
another. The handheld reader 16(A) may be used to electronically secure or disarm the 
container via communication with the device 12, The handheld reader 16(A) may also be 

20 used to obtain additional information from the device 12 such as, for example, 
information from additional sensors inside the container 10 or readings from the door 
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sensor 29. 

The handheld reader 16(A) shown in FIG. 3B is adapted to be interfaced with a mobile 
phone shown as 16(A1) or PDA. However, as will be appreciated by those having skill 
5 in the art, the handheld reader 16(A) may be a standalone unit or may also be adapted to 
be interfaced with, for example, a personal digital assistant or a handheld or laptop 
computer. The reader 16 draws power from the mobile phone and utilizes Bluetooth, or 
any similar interface, to communicate with the mobile phone. 

10 Additional application scenarios for the application of the device 12 and reader 16 will 
now be described with respect to FIGS. 4-8, Insofar as the attachment and detachment of 
the reader 16(B) to different transporting or transported units is referred to, any 
resolvable attachment is well covered by the present invention (e.g., magnetic fixing, 
mechanic fixing by screws, rails, hooks, balls, snap-on mountings, fiirther any kind of 

15 electrically achievable attachment, e.g., electro magnets, or further reversible chemical 
fixtures such as adhesive tape, scotch tape, glue, pasted tape). 

FIG. 4 shows a first application scenario of the device 12 and the reader 16. As shown in 
FIG. 4 one option related to road transportation is to fix the reader 16 to the gate or a 
shipping warehouse or anywhere along the supply chain. In such a case, the reader 16 
20 may easily communicate with the device 12 of the container 10 when being towed by the 
truck when exiting the shipping area. Another option is to provide the reader 16 as a 
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handheld reader 16(A) as described above and then either scan the device 12 as the truck 
leaves the area or carry the hand-held reader 16(A) within the cabin of the truck during 
surveillance of the container 10. 

FIG. 5 shows a second application scenario for the device 12 and the reader 16 as related 
5 to rail transportation. In particular, FIG. 5 shows a first example where the reader 16 is 
attachably fixed along the rail line for short-range wireless communication to those 
containers located in the reach of the reader 16. The reader 16 may then achieve a short 
range communication with any or all of the devices 12 of the containers 10 that are 
transported on the rail line. 

10 The same principles apply to a third application scenario for the container surveillance 
components, as shown in FIG. 6. Here, for each container to be identified, tracked, or 
monitored during sea transport, there must be provided a reader 16 in reach of the device 
12 attached to the container 10. A first option would be to modify the loading scheme 
according to the attachment schemes for the wireless communication units. 

15 Alternatively, the distribution of the readers 16 over the container ship could be 
determined in accordance with a loading scheme being determined according to other 
constraints and parameters. Again, the flexible attachment/detachment of readers 16 for 
the surveillance of containers allows to avoid any fixed assets that would not generate 
revenues for the operator. In other words, once no more surveillance of containers is 

20 necessary, the reader 16 may easily be detached fi'om the container ship and either be 
used on a different container ship or any other transporting device. The reader 16 may 

31 

DALLAS2 997976v4 62929-00002 



CUSTOMER NO. 23932 



PATENT APPLICATION 
62929-00002USPX 



also be connected to the AIS, based on VHF conununication, or Inmarsat satellites, both 
often used by shipping vessels. 

While above the application of the inventive surveillance components has been described 
with respect to long range global, regional or local transportation, in the following the 
5 application within a restricted area will be explained with respect to FIG. 7. 

In particular, the splitting of the short range and long range wireless communication 
within a restricted area is applied to all vehicles and devices 12 handling the container 10 
within the restricted area such as a container terminal, a container port, or a 
manufacturing site in any way. The restricted area includes in-gates and out-gates of 
10 such terminals and any kind of handling vehicles such as top-loaders, side-loaders, reach 
stackers, transtainers, hustlers, cranes, straddle carriers, etc. 

A specific container is not typically searched for using only a single reader 16; rather, a 
plurality of readers 16 spread over the terminal and receive status and control information 
each time a container 10 is handled by, for example, a crane or a stacker. In other words, 
15 when a container passes a reader 16, the event is used to update related status and control 
information. 

FIG. 8 illustrates a flow diagram of a securing process in accordance with an embodiment 
of the present invention. First, at step 800, identification is requested from the device 12 
by the reader 16. At step 802, the device 12 transmits the identification to the reader 16 
20 and, at step 804, the reader 16 selects a container 10 to secure. A request is sent from the 
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reader 16 to the server 15 at step 806. At step 808, the server 15 generates a security key 
and encrypts the security key with an encryption code. At step 810, the encrypted 
security key is transmitted to the device 12 via the reader 16 in order to secure the 
container 10. At step 812, the security key is decrypted and stored in the device 12. A 
5 similar procedure may be initiated to disarm the container 10. The container 10 may be 
secured automatically when passing in range of a reader 16, or a user may secure or 
disarm specific chosen containers 10 at a time. 

FIG. 9 illustrates a security-check process in accordance with an embodiment of the 
present invention. At step 900, the reader 16 transmits a challenge to the container 10 in 

10 question. At step 902, the device 12 of the container 10 generates a response using a 
security key and an encryption code. At step 904, the response is sent from the device 12 
to the reader 16. At step 906, the reader 16 also sends a challenge to the server 15. The 
challenges to the server 15 and the device 12 may be transmitted substantially 
simultaneously or at alternate points in time. The server 15 generates and sends a 

15 response utilizing the security key and an encryption code to the reader 16 at steps 908 
and 910 respectively. At step 912, the reader 16 determines if the responses are equal. If 
the responses are equal, then the container 10 remains safely secured. Alternatively, if 
the responses are not equal, then a security breach (i.e., door event) of the container 10 
has occurred. Similarly to the securing and disarming processes, a security-check may be 

20 performed automatically as the container 10 passes in range of a reader 16 or a user may 
initiate a security-check at any time during transport. 
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Referring now to FIG. 10, a flow diagram of a calibration and filter process for the door 
sensor 29 is illustrated. At step 1000, the door sensor 29 is activated to sense a current 
pressure value every 0.5 seconds, although other time increments may be implemented. 
The current pressure value is read fi-om the door sensor 29 at step 1002. At step 1004, a 

5 number of readings (X), with a time distance of 30 microseconds between each, are 
accumulated in order to calculate a mean pressure value at step 1006. At step 1008, it is 
determined whether the door is open. The door is considered open if the mean value is 
above an open threshold calculated in previous iterations at step 1012 below. If the door 
is open, then the flow proceeds to step 1010, at which step the mean pressure value is 

10 added to a slow low pass filter to get the value for the sensor without any pressure 
attached (upper limit reference). If it is determined that the door is closed at step 1008, 
then the flow proceeds to step 1012, at which open, close, and tamper thresholds are 
calculated using the upper limit reference fi-om step 1010 and the armed limit reference 
fi-om step 1020 and step 1024 (described below) from previous iterations. The open, 

15 close, and tamper thresholds are used to determine if the door is opened or closed at step 
1008 and 1022 so that, if either of the open or tamper thresholds is exceeded at step 1022, 
it is concluded that a security breach has occurred. 

At step 1014, it is determined whether the device 12 is currently in an armed state (i.e., 
whether the container 10 has been secured. If the device 12 is not armed, then the door 
20 status is updated at step 1016 using the open and close thresholds fi'om step 1012. If the 
device 12 is armed, then it is determined at step 1018 whether the device 12 was 
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previously armed. If the device 12 was not previously armed, then at step 1020, an 
armed limit reference is set to the current mean pressure value from step 1006. At step 
1022, it is determined whether the current pressure value exceeds the open or tamper 
limits. If the mean value from step 1006 does not exceed the open or tamper limits, then 
5 at step 1024 the mean value from step 1006 is inserted to the fiher for the armed limit 
reference. If the mean value from step 1006 exceeds the open or tamper limits, then at 
step 1026 it is determined whether the condition is persistent. If the condition is 
persistent (i.e., the condition occurs consistently for 2 seconds or more), then at step 1028 
the tamper alarm is set to alert the system and/or user that a security breach has occurred. 

10 Although embodiment(s) of the present invention have been illustrated in the 

accompanying Drawings and described in the foregoing Detailed Description, it will be 
understood that the present invention is not limited to the embodiment(s) disclosed, but is 
capable of numerous rearrangements, modifications, and substitutions without departing 
from the invention defined by the following claims. 
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